$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.mft File: d0aed758-847b-4853-9fce-f0451b5fa2b3.mft (raw, json) Hash identifier: cMHdwdoOBCWqm5UvjRXDXt6+j1s2sNX+6lWwLWs2hMI= Subject key identifier: 57:46:B5:36:A4:C8:BF:D9:75:F6:65:24:FD:B7:15:26:6F:43:EE:C9 Authority key identifier: 26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27 Certificate issuer: /CN=d0aed758-847b-4853-9fce-f0451b5fa2b3 Certificate serial: 010D0C9F43285849BDBBE7399AD897B9DB573E40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.mft Manifest number: 010D0C9F4328584073A852BC25CC4A592292AB9E Signing time: Sun 04 May 2025 12:00:08 +0000 Manifest this update: Sun 04 May 2025 12:00:08 +0000 Manifest next update: Tue 06 May 2025 12:00:00 +0000 Files and hashes: 1: 09a572b8-7960-3b89-a1a8-7f9e35951515.roa (hash: lFYcTP7C+e69TGY9t0qICD0BUOokngFJ+J6KelZUBds=) 2: b2a3d926-0f5a-3fc3-8fed-b7abf982077d.roa (hash: K0yvB93gY8ybqawa/g/MwBnafdxO9euKzp5+FjDp23w=) 3: d0aed758-847b-4853-9fce-f0451b5fa2b3.crl (hash: 3f4iqJuxD7YkUWfc/7bdtBq4JQ0rK3A3yeG217RoLR8=) 4: f6acc70e-c734-33fd-b763-a2d285f343fe.roa (hash: iAAhqyjGyWoef3+xF3fGnew7Dmoujsxzn/q30aUF3wU=) 5: fe196e76-1d06-3092-a96a-07322f606f5e.roa (hash: eh0yurxy5s/n66YL3UqAg4t/P5kkBlHoP2WzxRk4hOc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:bb:e7:39:9a:d8:97:b9:db:57:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0aed758-847b-4853-9fce-f0451b5fa2b3 Validity Not Before: May 4 12:00:08 2025 GMT Not After : May 6 12:00:00 2025 GMT Subject: CN=aa733408-844b-4ce7-b5f3-0f7ed233775f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ee:e3:b8:90:84:cd:c2:27:5c:f2:2f:f9:b9: ab:a5:dc:2f:cd:db:38:1f:70:b3:8a:88:2a:b8:6d: 44:9e:9d:bc:2d:ed:57:5d:82:de:05:3a:00:70:8a: d3:76:7c:0c:47:4f:71:7c:98:dd:14:01:2c:a3:27: 1c:f4:1b:8b:f2:5a:e8:ca:49:1b:cf:92:c2:dd:91: 01:53:66:40:e7:02:9a:c2:6d:f0:4b:e1:d0:9a:88: 23:b5:c5:48:11:df:83:c1:5c:e5:c6:ae:74:05:3e: a2:c0:52:6e:14:22:dd:ef:01:4b:8c:a4:d9:d7:a8: c5:16:5e:36:e9:88:29:4a:8e:f6:d6:0c:8d:3e:08: 7e:54:06:64:3e:db:b4:bd:79:6e:62:e4:9c:84:de: b0:42:cc:9c:21:b8:20:80:07:03:4d:75:5c:8d:c4: fa:81:84:f9:db:fa:be:c6:f1:ee:e6:c2:f9:32:40: 4d:c1:0f:f8:af:d4:04:a9:0c:73:5a:70:ef:e8:b7: 58:98:51:71:ea:a7:4f:07:6f:96:44:54:f6:ed:bb: f6:db:50:fc:92:f9:ed:e6:57:87:5e:9b:1d:ca:37: fb:f7:9c:b0:c9:09:29:89:2a:36:93:eb:84:82:5c: d4:84:19:ec:07:48:36:a8:64:65:ae:6d:dd:1f:28: 5b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:46:B5:36:A4:C8:BF:D9:75:F6:65:24:FD:B7:15:26:6F:43:EE:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.crl X509v3 Authority Key Identifier: keyid:26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:c7:d3:da:89:43:74:96:e4:32:3b:a6:49:ae:b6:5b:99:3f: ca:94:aa:f8:f1:dd:0a:6e:cb:23:c7:8f:cc:fe:32:c3:c1:4c: c5:31:0b:66:2b:21:c6:f0:76:65:ca:5c:88:b4:5d:85:6a:0f: b5:a5:57:09:b3:73:a3:e4:8d:f4:96:c9:47:c9:12:0f:bb:2b: 78:28:46:ae:af:9a:57:42:0b:ee:c5:96:43:de:4c:c8:a8:f2: c1:85:a3:cb:45:4a:c4:94:a2:05:a1:0d:01:29:e1:d8:6e:ba: 47:62:c5:fc:c5:ea:fd:df:48:02:7f:8b:ac:cf:66:87:63:f0: bd:75:40:98:ee:0d:8f:19:f4:db:0e:dd:92:5e:10:1c:69:c3: ec:ac:1a:d5:7c:dc:50:1f:1e:c6:2f:16:f7:3c:53:ca:99:88: 95:f7:36:e9:9f:cf:45:ba:1c:98:24:db:e2:36:63:1d:6d:f0: 6e:ec:19:a5:89:1d:c0:26:2d:a0:9d:b8:61:7d:1a:dd:91:9e: 0b:4a:b6:a9:23:b6:b0:05:e9:ae:bf:74:46:9f:da:e9:b9:63: 3a:aa:57:d6:11:cc:4b:55:bf:0e:f0:9e:2c:3f:2f:61:6f:39: 1d:4e:2a:ad:3e:3b:9b:ed:a7:09:2d:f5:35:41:8e:18:58:d7: 87:a4:7c:d2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEm9u+c5mtiXudtXPkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBhZWQ3NTgtODQ3Yi00ODUzLTlmY2UtZjA0NTFiNWZh MmIzMB4XDTI1MDUwNDEyMDAwOFoXDTI1MDUwNjEyMDAwMFowLzEtMCsGA1UEAxMk YWE3MzM0MDgtODQ0Yi00Y2U3LWI1ZjMtMGY3ZWQyMzM3NzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO7juJCEzcInXPIv+bmrpdwvzds4H3Cziogq uG1Enp28Le1XXYLeBToAcIrTdnwMR09xfJjdFAEsoycc9BuL8lroykkbz5LC3ZEB U2ZA5wKawm3wS+HQmogjtcVIEd+DwVzlxq50BT6iwFJuFCLd7wFLjKTZ16jFFl42 6YgpSo721gyNPgh+VAZkPtu0vXluYuSchN6wQsycIbgggAcDTXVcjcT6gYT52/q+ xvHu5sL5MkBNwQ/4r9QEqQxzWnDv6LdYmFFx6qdPB2+WRFT27bv221D8kvnt5leH Xpsdyjf795ywyQkpiSo2k+uEglzUhBnsB0g2qGRlrm3dHyhbWwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFdGtTakyL/ZdfZlJP23FSZvQ+7JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMGFl ZDc1OC04NDdiLTQ4NTMtOWZjZS1mMDQ1MWI1ZmEyYjMvZDBhZWQ3NTgtODQ3Yi00 ODUzLTlmY2UtZjA0NTFiNWZhMmIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDBhZWQ3NTgtODQ3Yi00ODUzLTlm Y2UtZjA0NTFiNWZhMmIzL2QwYWVkNzU4LTg0N2ItNDg1My05ZmNlLWYwNDUxYjVm YTJiMy5jcmwwHwYDVR0jBBgwFoAUJilJP/OCupL6yCxvq0gH82UlXCcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMGFlZDc1OC04NDdiLTQ4NTMtOWZjZS1mMDQ1 MWI1ZmEyYjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCgx9PaiUN0luQyO6ZJrrZb mT/KlKr48d0Kbssjx4/M/jLDwUzFMQtmKyHG8HZlylyItF2Fag+1pVcJs3Oj5I30 lslHyRIPuyt4KEaur5pXQgvuxZZD3kzIqPLBhaPLRUrElKIFoQ0BKeHYbrpHYsX8 xer930gCf4usz2aHY/C9dUCY7g2PGfTbDt2SXhAcacPsrBrVfNxQHx7GLxb3PFPK mYiV9zbpn89FuhyYJNviNmMdbfBu7BmliR3AJi2gnbhhfRrdkZ4LSrapI7awBemu v3RGn9rpuWM6qlfWEcxLVb8O8J4sPy9hbzkdTiqtPjub7acJLfU1QY4YWNeHpHzS -----END CERTIFICATE-----Generated at Sun May 4 20:42:33 2025 by rpki-client